Privacy Policy

This Privacy Policy explains how Acustaf (UK) Ltd and Acustaf Co. Ltd., Thailand (together “Acustaf Consultancy”, “we”, “us”) collect and use personal data when you visit our websites, submit an enquiry, use our signed-in client portal, or receive our consultancy and Odoo-related services.

1. Who we are

We trade as Acustaf Consulting / Acustaf Consultancy. Our public websites include acustaf-consulting.com, acustaf.co.uk and acustaf-asia.com. Depending on your location and engagement, the relevant controller is usually Acustaf (UK) Ltd (Europe) or Acustaf Co. Ltd., Thailand (Asia). Contact details are on our Contact page.

2. Scope of this policy

This policy covers personal data processed in connection with:

• Our public websites and marketing pages (including Services, Odoo, About and Contact).
• Enquiry and contact forms.
• The signed-in client portal (for example invoices, helpdesk tickets and related account access).
• Delivery of business consultancy, process analysis, ERP/IT implementation (including Odoo), training, support and related project communications.

Separate contracts, statements of work and software licence documents (including module COPYRIGHT / LICENSE files supplied with proprietary Acustaf Odoo addons) may contain additional terms for customer systems.

3. Data we collect

Depending on how you interact with us, we may process:

• Identity and contact data — name, company, job title, email, phone and address.
• Enquiry and project data — subject, message content, requirements and correspondence.
• Portal account data — login identifiers, access roles and activity needed to operate the portal.
• Support data — helpdesk tickets, attachments you supply and resolution notes.
• Technical data — IP address, browser/device type, timestamps and security logs.
• Billing data — invoice and payment references where we bill you for services (payment card data is typically handled by payment providers, not stored by us in full).

4. How we use personal data

We use personal data to:

• Respond to enquiries and provide the services described on our website.
• Operate the client portal, helpdesk and related support.
• Manage contracts, invoicing and customer relationships.
• Secure, maintain and improve our websites and systems.
• Meet legal, regulatory and accounting obligations.

We do not sell personal data.

5. Legal bases

Where UK GDPR / EU GDPR applies, we rely on one or more of: performance of a contract; legitimate interests (for example securing our systems and responding to business enquiries); consent (where we ask for it); and legal obligation. Where Thailand’s PDPA applies, we process personal data in accordance with that Act and related rules, according to the relevant Acustaf entity and the location of the data subject.

6. Sharing and international transfers

We may share personal data with trusted processors who host email, infrastructure, analytics or support tools under contract, and with professional advisers where required. Because we operate in the UK/Europe and Thailand, data may be accessed by Acustaf staff in those regions as needed to deliver the service. Where transfers require safeguards, we use appropriate contractual and organisational measures.

7. Retention

We keep personal data only as long as needed for the purposes above, including enquiry follow-up, contract and warranty periods, portal operation, and legal retention duties (for example accounting records), then delete or anonymise it where practicable.

8. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, or portability of your personal data, and you may withdraw consent where processing is consent-based. You may also complain to the UK Information Commissioner’s Office (ICO) or the relevant Thai authority. To exercise rights, contact us via the Contact page.

9. Cookies

We use cookies and similar technologies required for session, authentication and security on the website and portal. We may use analytics cookies where configured. You can control cookies through your browser settings; blocking essential cookies may affect portal login and form submission.

10. Children

Our websites and services are directed to business users. We do not knowingly collect personal data from children.

11. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be notified via the website or portal.

12. Contact

Privacy questions: use the Contact page, or write to the Acustaf office that serves your region (UK · +44 207 112 7778 · Thailand · +66 2 56 900 56).